This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/01809b-42dd-4136-96b1-1fd10d8e075f/1/Q8d7RzY2gTePrORmFB1UzIg5nPU.mft File: Q8d7RzY2gTePrORmFB1UzIg5nPU.mft (raw, json) Hash identifier: kpkRuS/kN25cnvuwFJ8ctiIk6H6RBXxLu+6XNFtxhog= Subject key identifier: CF:94:EF:6D:72:C9:36:D2:B8:0D:37:1A:98:B1:4F:3F:03:8B:E9:B1 Authority key identifier: 43:C7:7B:47:36:36:81:37:8F:AC:E4:66:14:1D:54:CC:88:39:9C:F5 Certificate issuer: /CN=43c77b47363681378face466141d54cc88399cf5 Certificate serial: 019B51BDFD53A05FE97D1D023312CFEC8603 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q8d7RzY2gTePrORmFB1UzIg5nPU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/01809b-42dd-4136-96b1-1fd10d8e075f/1/Q8d7RzY2gTePrORmFB1UzIg5nPU.mft Manifest number: 1724 Signing time: Wed 24 Dec 2025 19:02:44 +0000 Manifest this update: Wed 24 Dec 2025 19:02:44 +0000 Manifest next update: Thu 25 Dec 2025 19:02:44 +0000 Files and hashes: 1: LhVPheiP2Wbqe7xFjCy9IQ_CSc0.roa (hash: Jd5k/N8+tstl7PIZFFMbIYM8R6nDjGK5pnVrR8G85AA=) 2: Q8d7RzY2gTePrORmFB1UzIg5nPU.crl (hash: 1upVfAyylOeNPtXttMW6sileTLb240cIC4vhOMYQ8aw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/01809b-42dd-4136-96b1-1fd10d8e075f/1/Q8d7RzY2gTePrORmFB1UzIg5nPU.crl rsync://rpki.ripe.net/repository/DEFAULT/fa/01809b-42dd-4136-96b1-1fd10d8e075f/1/Q8d7RzY2gTePrORmFB1UzIg5nPU.mft rsync://rpki.ripe.net/repository/DEFAULT/Q8d7RzY2gTePrORmFB1UzIg5nPU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Dec 2025 18:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:51:bd:fd:53:a0:5f:e9:7d:1d:02:33:12:cf:ec:86:03 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=43c77b47363681378face466141d54cc88399cf5 Validity Not Before: Dec 24 19:02:44 2025 GMT Not After : Dec 25 19:02:44 2025 GMT Subject: CN=cf94ef6d72c936d2b80d371a98b14f3f038be9b1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:ce:82:7e:f3:fd:93:b9:1a:5d:34:04:35:5e: 4e:9a:01:2d:fc:2d:2e:83:41:44:ee:51:9e:a9:77: 4d:15:45:b5:ac:85:31:65:11:ab:0e:4c:e5:4e:5e: ef:7d:c9:3e:78:34:cc:6f:38:59:ff:6b:79:1a:bc: 9b:73:dd:f7:fe:90:4a:14:33:00:96:b2:79:52:71: fe:ed:da:d9:89:3c:85:21:9c:70:14:5c:86:13:28: 4c:05:0f:b6:5b:e9:c9:60:21:28:a7:f4:18:d5:aa: 2c:a7:2c:fe:71:33:55:ca:f3:09:da:2a:55:05:52: e2:2c:52:60:77:ad:e3:de:f2:36:a8:48:e5:b9:5d: 1d:90:33:7d:99:b1:86:79:ee:10:ea:65:8e:e1:67: f5:55:8b:5b:65:ba:a3:87:f7:cb:57:dd:68:4f:62: 9d:19:21:da:20:74:ce:6a:d2:f9:c2:a4:ea:3c:b6: 92:62:74:d7:b6:a4:db:a8:18:9e:e3:79:29:db:10: 16:dc:db:2b:d7:e6:08:df:8d:f7:de:6a:c9:cf:8b: 85:2a:e1:72:4a:61:2d:ce:a6:1f:fc:b6:73:d0:a1: 6a:55:59:69:48:38:03:9a:0a:b4:f2:8c:da:16:33: 2c:cc:68:43:d5:ac:68:52:75:1b:5d:71:5f:78:53: 36:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:94:EF:6D:72:C9:36:D2:B8:0D:37:1A:98:B1:4F:3F:03:8B:E9:B1 X509v3 Authority Key Identifier: keyid:43:C7:7B:47:36:36:81:37:8F:AC:E4:66:14:1D:54:CC:88:39:9C:F5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q8d7RzY2gTePrORmFB1UzIg5nPU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/01809b-42dd-4136-96b1-1fd10d8e075f/1/Q8d7RzY2gTePrORmFB1UzIg5nPU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/01809b-42dd-4136-96b1-1fd10d8e075f/1/Q8d7RzY2gTePrORmFB1UzIg5nPU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a8:f3:8c:f0:f9:95:e7:09:41:8a:ae:f5:26:e2:60:2b:ee:b2: 70:29:8b:1f:b0:b4:0f:ed:05:01:e0:5e:25:01:db:ed:88:6d: 45:8f:ad:a4:12:af:78:95:b8:2d:56:ea:d0:20:b6:cd:5d:9b: 75:e5:40:81:45:a7:9a:8c:83:34:ce:22:2a:89:32:d5:ed:01: 87:7f:57:7b:46:00:7c:fc:18:6e:fe:62:76:ce:42:3f:cf:f7: f6:de:da:1c:ff:37:0e:85:5a:6d:8f:bc:38:35:e3:48:dc:a4: 5f:19:e4:ea:ee:4d:54:3a:66:ca:8a:2b:36:2f:d5:f8:44:a8: e2:ae:8d:3e:f1:39:fe:03:44:78:3d:65:f1:c4:dd:2a:5f:07: 9e:8b:ed:15:ac:10:69:80:1d:36:d1:26:af:35:61:c3:1c:0f: 69:55:97:39:84:eb:00:95:ba:a1:ba:f2:7d:d1:65:5e:cf:25: ff:cd:72:85:cd:88:ac:47:54:60:26:09:4d:be:cd:36:78:fe: 42:68:8d:63:d7:e5:96:c6:c3:5e:c4:15:0d:15:17:a9:74:4e: b3:fc:40:a1:c1:b1:88:69:d4:40:f2:5e:11:9d:0e:3b:76:59: 7e:d2:83:20:39:bc:e4:39:5c:87:33:c4:3c:56:92:d9:90:26: 8a:02:b1:f2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtRvf1ToF/pfR0CMxLP7IYDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQzYzc3YjQ3MzYzNjgxMzc4ZmFjZTQ2NjE0MWQ1NGNjODgz OTljZjUwHhcNMjUxMjI0MTkwMjQ0WhcNMjUxMjI1MTkwMjQ0WjAzMTEwLwYDVQQD EyhjZjk0ZWY2ZDcyYzkzNmQyYjgwZDM3MWE5OGIxNGYzZjAzOGJlOWIxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn86CfvP9k7kaXTQENV5OmgEt/C0u g0FE7lGeqXdNFUW1rIUxZRGrDkzlTl7vfck+eDTMbzhZ/2t5Grybc933/pBKFDMA lrJ5UnH+7drZiTyFIZxwFFyGEyhMBQ+2W+nJYCEop/QY1aospyz+cTNVyvMJ2ipV BVLiLFJgd63j3vI2qEjluV0dkDN9mbGGee4Q6mWO4Wf1VYtbZbqjh/fLV91oT2Kd GSHaIHTOatL5wqTqPLaSYnTXtqTbqBie43kp2xAW3Nsr1+YI34333mrJz4uFKuFy SmEtzqYf/LZz0KFqVVlpSDgDmgq08ozaFjMszGhD1axoUnUbXXFfeFM2QQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFM+U721yyTbSuA03GpixTz8Di+mxMB8GA1UdIwQY MBaAFEPHe0c2NoE3j6zkZhQdVMyIOZz1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUThkN1J6WTJnVGVQck9SbUZCMVV6SWc1blBVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYS8wMTgwOWItNDJkZC00MTM2LTk2YjEt MWZkMTBkOGUwNzVmLzEvUThkN1J6WTJnVGVQck9SbUZCMVV6SWc1blBVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYS8wMTgwOWItNDJkZC00MTM2LTk2YjEtMWZkMTBkOGUwNzVm LzEvUThkN1J6WTJnVGVQck9SbUZCMVV6SWc1blBVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqPOM8PmV 5wlBiq71JuJgK+6ycCmLH7C0D+0FAeBeJQHb7YhtRY+tpBKveJW4LVbq0CC2zV2b deVAgUWnmoyDNM4iKoky1e0Bh39Xe0YAfPwYbv5ids5CP8/39t7aHP83DoVabY+8 ODXjSNykXxnk6u5NVDpmyoorNi/V+ESo4q6NPvE5/gNEeD1l8cTdKl8HnovtFawQ aYAdNtEmrzVhwxwPaVWXOYTrAJW6obryfdFlXs8l/81yhc2IrEdUYCYJTb7NNnj+ QmiNY9fllsbDXsQVDRUXqXROs/xAocGxiGnUQPJeEZ0OO3ZZftKDIDm85DlchzPE PFaS2ZAmigKx8g== -----END CERTIFICATE-----Generated at Thu Dec 25 03:30:41 2025 by rpki-client